Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 00:58:56.180 00:00:10.366 TCP 23.104.0.1:38720 -> 1.101.0.1:3000 11 1507 1 2025-09-11 00:58:52.070 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41678 10 6452 1 2025-09-11 00:59:56.578 00:00:10.323 TCP 23.104.0.1:41194 -> 1.101.0.1:3000 11 1507 1 2025-09-11 00:59:52.303 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39426 10 6452 1 2025-09-11 00:56:26.573 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 01:00:52.517 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49518 10 6452 1 2025-09-11 01:00:56.944 00:00:10.327 TCP 23.104.0.1:42528 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:01:21.164 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 01:01:21.151 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 01:01:52.726 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38282 10 6452 1 2025-09-11 01:01:57.311 00:00:10.363 TCP 23.104.0.1:44012 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:02:52.940 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:46204 10 6452 1 2025-09-11 01:02:57.717 00:00:10.377 TCP 23.104.0.1:57706 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:03:53.170 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57576 10 6452 1 2025-09-11 01:03:58.141 00:00:10.362 TCP 23.104.0.1:42290 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:00:26.576 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 01:04:53.387 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53922 10 6452 1 2025-09-11 01:04:58.542 00:00:10.329 TCP 23.104.0.1:47918 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:05:53.552 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39718 10 6452 1 2025-09-11 01:05:58.904 00:00:10.371 TCP 23.104.0.1:55066 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:06:21.285 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 01:06:21.462 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 01:02:26.574 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 01:06:53.726 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56094 10 6452 1 2025-09-11 01:06:59.315 00:00:10.523 TCP 23.104.0.1:41152 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:07:53.940 00:00:10.334 TCP 1.101.0.1:3000 -> 22.102.0.1:47006 10 6452 1 2025-09-11 01:07:59.871 00:00:10.332 TCP 23.104.0.1:38288 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:08:54.315 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47236 10 6452 1 2025-09-11 01:09:00.240 00:00:10.366 TCP 23.104.0.1:54310 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:09:54.526 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34856 10 6452 1 2025-09-11 01:10:00.645 00:00:10.368 TCP 23.104.0.1:49772 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:06:26.578 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 01:10:54.738 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:42600 10 6452 1 2025-09-11 01:11:01.080 00:00:10.367 TCP 23.104.0.1:35524 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:11:21.497 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 01:11:21.753 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 01:11:54.912 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51288 10 6452 1 2025-09-11 01:12:01.487 00:00:10.363 TCP 23.104.0.1:51446 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:08:26.578 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 01:12:55.130 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42580 10 6452 1 2025-09-11 01:13:01.890 00:00:10.382 TCP 23.104.0.1:38124 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:13:55.356 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45890 10 6452 1 2025-09-11 01:14:02.306 00:00:10.362 TCP 23.104.0.1:38926 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:14:55.570 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:41924 10 6452 1 2025-09-11 01:15:02.709 00:00:10.379 TCP 23.104.0.1:55982 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:15:55.782 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54246 10 6452 1 2025-09-11 01:16:03.127 00:00:10.368 TCP 23.104.0.1:47530 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:16:21.744 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 01:16:22.016 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 01:12:26.580 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 01:16:56.007 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41912 10 6452 1 2025-09-11 01:17:03.536 00:00:10.365 TCP 23.104.0.1:36610 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:17:56.185 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:43234 10 6452 1 2025-09-11 01:18:03.943 00:00:10.371 TCP 23.104.0.1:53348 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:14:26.578 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 01:18:56.437 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56112 10 6452 1 2025-09-11 01:19:04.358 00:00:10.327 TCP 23.104.0.1:42348 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:19:56.609 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38054 10 6452 1 2025-09-11 01:20:04.724 00:00:10.401 TCP 23.104.0.1:45180 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:20:56.785 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43398 10 6452 1 2025-09-11 01:21:05.162 00:00:10.324 TCP 23.104.0.1:50230 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:21:21.851 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 01:21:21.759 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 01:21:56.957 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:60856 10 6452 1 2025-09-11 01:22:05.524 00:00:10.370 TCP 23.104.0.1:37012 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:18:26.583 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 01:22:57.201 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34534 10 6452 1 2025-09-11 01:23:05.930 00:00:10.390 TCP 23.104.0.1:38444 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:23:57.422 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59476 10 6452 1 2025-09-11 01:24:06.354 00:00:10.363 TCP 23.104.0.1:60296 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:20:26.580 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 01:24:57.594 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59474 10 6452 1 2025-09-11 01:25:06.758 00:00:10.704 TCP 23.104.0.1:37692 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:25:57.817 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46610 10 6452 1 2025-09-11 01:26:21.868 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 01:26:21.715 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 01:26:07.497 00:00:10.368 TCP 23.104.0.1:56658 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:26:58.036 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58490 10 6452 1 2025-09-11 01:27:07.904 00:00:10.329 TCP 23.104.0.1:38096 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:27:58.207 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59092 10 6452 1 2025-09-11 01:28:08.277 00:00:10.372 TCP 23.104.0.1:60124 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:24:26.585 00:05:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 01:28:58.418 00:00:10.476 TCP 1.101.0.1:3000 -> 22.102.0.1:52378 10 6452 1 2025-09-11 01:29:08.706 00:00:10.366 TCP 23.104.0.1:46226 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:29:58.937 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:38716 10 6452 1 2025-09-11 01:30:09.114 00:00:10.366 TCP 23.104.0.1:47472 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:26:26.583 00:05:00.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 01:30:59.178 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41102 10 6452 1 2025-09-11 01:31:09.521 00:00:10.382 TCP 23.104.0.1:49786 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:31:21.679 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 01:31:21.859 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 01:31:59.399 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47732 10 6452 1 2025-09-11 01:32:09.928 00:00:10.383 TCP 23.104.0.1:36016 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:32:59.609 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53650 10 6452 1 2025-09-11 01:33:10.348 00:00:10.402 TCP 23.104.0.1:60534 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:33:59.826 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:41376 12 10367 1 2025-09-11 01:34:10.782 00:00:10.437 TCP 23.104.0.1:39712 -> 1.101.0.1:3000 15 1926 1 2025-09-11 01:30:26.588 00:05:00.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 01:35:00.044 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59244 10 6452 1 2025-09-11 01:35:11.258 00:00:10.365 TCP 23.104.0.1:34606 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:36:00.269 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59370 10 6452 1 2025-09-11 01:36:22.136 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 01:36:22.023 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 01:36:11.662 00:00:10.362 TCP 23.104.0.1:57530 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:32:26.585 00:05:00.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 01:37:00.487 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44218 10 6452 1 2025-09-11 01:37:12.092 00:00:10.367 TCP 23.104.0.1:56272 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:38:00.654 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51440 10 6452 1 2025-09-11 01:38:12.495 00:00:10.330 TCP 23.104.0.1:43674 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:39:00.866 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54902 10 6452 1 2025-09-11 01:39:12.858 00:00:10.373 TCP 23.104.0.1:57358 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:40:01.096 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48724 10 6452 1 2025-09-11 01:40:13.271 00:00:10.329 TCP 23.104.0.1:40798 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:36:26.587 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 01:41:01.312 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53914 10 6452 1 2025-09-11 01:41:21.852 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 01:41:22.160 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 01:41:13.635 00:00:10.366 TCP 23.104.0.1:36828 -> 1.101.0.1:3000 12 1559 1 2025-09-11 01:42:01.529 00:00:10.394 TCP 1.101.0.1:3000 -> 22.102.0.1:38788 10 6452 1 2025-09-11 01:42:14.047 00:00:10.361 TCP 23.104.0.1:37912 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:38:26.587 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 01:43:01.964 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44390 12 6556 1 2025-09-11 01:43:14.443 00:00:10.361 TCP 23.104.0.1:52310 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:44:02.187 00:00:10.924 TCP 1.101.0.1:3000 -> 22.102.0.1:45822 10 6452 1 2025-09-11 01:44:14.839 00:00:10.393 TCP 23.104.0.1:54058 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:45:03.157 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33396 10 6452 1 2025-09-11 01:45:15.268 00:00:10.363 TCP 23.104.0.1:47530 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:46:03.362 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:59034 10 6452 1 2025-09-11 01:46:22.290 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 01:46:22.014 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 01:46:15.667 00:00:10.324 TCP 23.104.0.1:36224 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:42:26.590 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 01:47:03.542 00:00:10.306 TCP 1.101.0.1:3000 -> 22.102.0.1:36630 10 6452 1 2025-09-11 01:47:16.027 00:00:10.748 TCP 23.104.0.1:37190 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:48:03.886 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39672 10 6452 1 2025-09-11 01:44:26.588 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 01:48:16.816 00:00:10.326 TCP 23.104.0.1:52680 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:49:04.110 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34932 10 6452 1 2025-09-11 01:49:17.178 00:00:10.324 TCP 23.104.0.1:41880 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:50:04.319 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49188 10 6452 1 2025-09-11 01:50:17.538 00:00:10.364 TCP 23.104.0.1:46782 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:51:04.531 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51732 10 6452 1 2025-09-11 01:51:22.372 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 01:51:22.144 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 01:51:17.937 00:00:10.383 TCP 23.104.0.1:59060 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:52:04.749 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42814 10 6452 1 2025-09-11 01:52:18.361 00:00:10.377 TCP 23.104.0.1:37748 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:48:26.601 00:05:00.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 01:53:04.971 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57982 10 6452 1 2025-09-11 01:53:18.777 00:00:10.424 TCP 23.104.0.1:38634 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:54:05.202 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51612 10 6452 1 2025-09-11 01:50:26.599 00:05:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 01:54:19.238 00:00:10.365 TCP 23.104.0.1:36878 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:55:05.385 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53504 10 6452 1 2025-09-11 01:55:19.643 00:00:10.368 TCP 23.104.0.1:39372 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:56:05.595 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47538 10 6452 1 2025-09-11 01:56:22.466 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 01:56:22.229 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 01:56:20.049 00:00:10.364 TCP 23.104.0.1:35240 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:57:05.811 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39364 10 6452 1 2025-09-11 01:57:20.452 00:00:10.339 TCP 23.104.0.1:38572 -> 1.101.0.1:3000 11 1507 1 2025-09-11 01:58:06.040 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46398 10 6452 1 2025-09-11 01:54:26.602 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 01:58:20.825 00:00:10.363 TCP 23.104.0.1:35818 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502838, total packets: 1581, avg bps: 1063, avg pps: 0, avg bpp: 318 Time window: 2025-09-11 00:56:26 - 2025-09-11 01:59:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0047s User: 0.0009s Wall: 0.0020s flows/second: 82329.8 Runtime: 0.0020s